blob: a40001788fccad8e8f334c10746160b49fc49eea [file] [log] [blame]
CONSOLE MESSAGE: line 38: Testing main world. Eval should be blocked by main world CSP.
CONSOLE MESSAGE: line 7: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self'".
CONSOLE MESSAGE: line 13: PASS: eval blocked as expected.
CONSOLE MESSAGE: line 44: Testing isolated world with no csp. Eval should be allowed.
CONSOLE MESSAGE: PASS: eval allowed as expected.
CONSOLE MESSAGE: line 55: Testing isolated world with strict csp.
CONSOLE MESSAGE: EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'none'".
CONSOLE MESSAGE: PASS: eval blocked as expected.
CONSOLE MESSAGE: line 64: Testing isolated world with permissive csp.
CONSOLE MESSAGE: PASS: eval allowed as expected.
This tests the handling of unsafe-eval CSP checks and its interaction with the isolated world CSP.